Advisory ID: PHSA-2017-0040
Type : Security
Severity : [Critical,Important,Moderate,Low]
Issued on : 2017-Oct-24
Affected versions : PhotonOS 1.0

An update of [openjdk,openjre,bash,libtar,glibc,libgcrypt,strongswan,unzip] packages for PhotonOS has been released.

openjdk - CVE-2017-10346 CVE-2017-10285
openjre - CVE-2017-10346 CVE-2017-10285

openjdk - CVE-2017-10388 CVE-2017-10309
openjre - CVE-2017-10388 CVE-2017-10309
bash - CVE-2016-0634
strongswan - CVE-2017-11185

openjdk - CVE-2017-10274 CVE-2017-10388
openjre - CVE-2017-10274 CVE-2017-10388

libtar - CVE-2013-4420
glibc - CVE-2017-12133
libgcrypt - CVE-2017-9526
unzip - CVE-2014-9913 CVE-2016-9844

Install the update packages ( tdnf update package_name )

bash-4.3.48-1.ph1.x86_64.rpm , sha256 : 06d38b520bad6cf3305431c2f75ab3af2f1a9662df15fb9088a5dd975e042c91 , size : 886K , date : 2017-10-25
bash-debuginfo-4.3.48-1.ph1.x86_64.rpm , sha256 : 813aaaff6628742042d59e58aab3f220e5d64819bc1a7dde377bab86634e715c , size : 1.4M , date : 2017-10-25
bash-lang-4.3.48-1.ph1.x86_64.rpm , sha256 : 64425dbe2a7e6b1f9aa1ed139f83131794305bf2f9295893f2b926669b9ca129 , size : 1.2M , date : 2017-10-25
libtar-1.2.20-3.ph1.x86_64.rpm , sha256 : e97b53da3d4eef4c316049a80019de6009f1d28d801e36bb061721c9373a387a , size : 30K , date : 2017-10-25
libtar-devel-1.2.20-3.ph1.x86_64.rpm , sha256 : 497ffd3a968f5b0e14549d6c9402c44759aa460a1590d1373c34d0f02f629b92 , size : 31K , date : 2017-10-25
glibc-2.22-14.ph1.x86_64.rpm , sha256 : cc26ced92969e86828f6e8329c2d1195c91808404c079bf8ea7961572e8c4034 , size : 19M , date : 2017-10-25
glibc-devel-2.22-14.ph1.x86_64.rpm , sha256 : a8fe6cf132d844e78245ad3fd04c11abd01a380f100c57b839504dcf0554c849 , size : 12M , date : 2017-10-25
glibc-lang-2.22-14.ph1.x86_64.rpm , sha256 : 9892f39dead66a50939475b19605201092c5587559654581b8d3cc885aed52e3 , size : 1.4M , date : 2017-10-25
libgcrypt-1.7.6-3.ph1.x86_64.rpm , sha256 : 5fc27487ebef30e42460fcdae8f18bf2989ef330eb4c24d869f5dc6ffb6ede71 , size : 477K , date : 2017-10-25
libgcrypt-debuginfo-1.7.6-3.ph1.x86_64.rpm , sha256 : ab022cc2308676f9172c768176eeebdb6851f7c9dc99fb8db9cb3671ba6e4766 , size : 1.6M , date : 2017-10-25
libgcrypt-devel-1.7.6-3.ph1.x86_64.rpm , sha256 : 94709c659047744bd8ae166b702bd94f85e42909680b66d7056aaa274d269175 , size : 27K , date : 2017-10-25
strongswan-5.5.1-2.ph1.x86_64.rpm , sha256 : 3e9ab1530a3d01c0fb8db12fc56748b0829f8720d762a1de662f1546f0cd513d , size : 1003K , date : 2017-10-25
strongswan-debuginfo-5.5.1-2.ph1.x86_64.rpm , sha256 : dfe83d53c3d5d0bf6d4573cbddde538ef8c915f526df4734be8b7a0e8e5b1ea8 , size : 6.9M , date : 2017-10-25
unzip-6.0-8.ph1.x86_64.rpm , sha256 : fc30b2f60281d7c99daad059ff006b51c493af203741aefe4a290bf8b6991b00 , size : 123K , date : 2017-10-25
openjdk-1.8.0.151-1.ph1.x86_64.rpm , sha256 : 2d14692646ea41a6660ad2c54a703c85192b32228709c85f43c03cae0f5ad1fa , size : 12M , date : 2017-10-25
openjdk-debuginfo-1.8.0.151-1.ph1.x86_64.rpm , sha256 : 6471d045445b86a9e16cdf938529c198086c8b7fdcc29a0d2e824bf8b474b3fe , size : 2.2M , date : 2017-10-25
openjdk-doc-1.8.0.151-1.ph1.x86_64.rpm , sha256 : 252e1d305f8235bc0b2548b868d23ddeaac72f9201c04558a337b13fb770f362 , size : 2.4M , date : 2017-10-25
openjdk-sample-1.8.0.151-1.ph1.x86_64.rpm , sha256 : fee3f90d7823f1df6c905d0d119c07a578317df04ff466171e4820cc01849888 , size : 456K , date : 2017-10-25
openjdk-src-1.8.0.151-1.ph1.x86_64.rpm , sha256 : 3e7c3ba8353be6fb8ed7624973c2f249076d8afcc70e710ccb29ca7bcb5f5a32 , size : 22M , date : 2017-10-25
openjre-1.8.0.151-1.ph1.x86_64.rpm , sha256 : fd9cb001a08faf0484795deb088736ca94bb7ce8da8949483614a8ba387e4ecd , size : 41M , date : 2017-10-25